Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: AGDuS99A3mhConrLb7TYYlZvnQRz99PjEmJfEU6EilQ=
Subject key identifier: F5:3D:42:DD:80:78:33:ED:68:F0:15:E9:79:0F:80:B6:F6:5C:1D:4E
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 019A7301A9B98FC3654C03A818913E3328ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 13:01:20 +0000
Manifest this update: Tue 11 Nov 2025 13:01:20 +0000
Manifest next update: Wed 12 Nov 2025 13:01:20 +0000
Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: czgHmouMQNqsC9ZkebAp41kysZaU/PpKMilIZ/FK/UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a9:b9:8f:c3:65:4c:03:a8:18:91:3e:33:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Nov 11 13:01:20 2025 GMT
Not After : Nov 12 13:01:20 2025 GMT
Subject: CN=f53d42dd807833ed68f015e9790f80b6f65c1d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:02:ce:38:f7:e6:f8:10:df:fe:18:74:62:
93:76:a0:7b:75:2c:19:51:f2:4f:06:7e:cc:d9:99:
6c:95:ab:8f:b9:44:b1:0b:5f:01:cf:77:2e:e4:1b:
6b:20:56:25:4d:72:44:69:02:8a:b2:7c:c8:61:e7:
d9:9b:1e:d6:a0:51:01:c2:6e:12:75:c2:af:64:52:
c2:f3:65:27:b1:d4:9c:87:93:3d:0a:e6:a2:95:cd:
b7:80:82:ac:47:bf:8c:2b:cf:b9:a4:90:3e:d6:18:
7d:30:f4:0a:81:6c:ea:23:11:fa:f9:61:82:f9:55:
29:2a:d4:c5:e5:54:24:29:62:2c:ef:4c:12:e6:8a:
bc:e1:73:bf:a0:92:f4:9c:51:62:05:db:7c:36:a7:
ce:26:7f:cf:4f:b2:a9:d0:9f:62:af:be:38:39:a5:
ee:0b:83:c8:38:12:1c:38:6a:40:c3:45:b5:a5:46:
2c:23:67:7a:74:b1:eb:79:7c:42:a2:b9:79:5e:06:
fe:ff:18:d4:b6:06:e7:40:5c:a9:ed:76:bf:81:55:
f2:95:7f:2d:fb:25:7c:7e:ef:32:b9:f2:1f:28:54:
81:eb:52:90:db:4b:b7:6f:07:10:6e:cc:02:b1:9e:
cb:af:aa:b5:16:d0:ea:d3:c1:c2:7f:db:a8:0d:61:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3D:42:DD:80:78:33:ED:68:F0:15:E9:79:0F:80:B6:F6:5C:1D:4E
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:55:f5:e6:94:88:c3:45:6e:c1:6a:ae:ae:1b:c3:54:a3:f2:
cc:7b:6f:74:f4:a9:da:49:ce:02:3f:38:1d:31:c9:b3:71:40:
1c:06:fb:80:b6:b6:96:20:65:26:4d:ae:c9:56:00:3e:aa:90:
c4:61:0f:99:54:f4:fb:bc:40:12:eb:d3:6d:23:3c:1a:0b:37:
6c:38:95:b0:82:34:f9:b1:fa:d6:7d:1d:d6:0e:de:54:a1:04:
01:b3:2c:2c:81:05:3c:43:69:77:d9:32:52:a5:68:d3:a4:f9:
f7:b1:58:c3:3c:c4:11:1e:45:21:5e:9a:dd:ea:e9:18:9a:16:
c6:f2:0c:10:78:1e:0b:08:e9:77:33:67:db:05:9c:62:55:86:
6d:c1:a1:59:7c:64:e6:cc:bb:b5:22:33:6c:23:b2:26:a7:68:
0b:a6:c7:78:1c:31:a2:17:2e:da:81:34:b1:a4:49:6c:5f:de:
18:6e:e1:ce:ae:2a:79:d3:c3:5b:30:91:07:b5:c8:13:10:b1:
37:67:3c:ae:48:65:c6:d0:fe:18:2b:5f:50:d9:59:26:ac:be:
24:27:50:fb:73:ff:a9:3b:f1:dc:3c:41:ab:a9:96:d4:9a:65:
dc:a7:91:ff:f6:19:b2:a3:d1:07:a1:6b:69:0b:0a:ed:aa:db:
f0:36:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:48 2025 by rpki-client